[Full-disclosure] Brute force attack - need your advice

[Michael Simpson]

On 2/12/08, Abilash Praveen <contactme at abilashpraveen.com> wrote:
> Ok - I may not be able to lock in the SSH to a particular IP, but can
> ofcourse try port-knocker and a non-password-based SSH. I will research a
> bit about these as i'm not very familiar with a port-knocker and a
> non-password-based SSH yet.
>
> Thanks for your advice again. Thanks to Keith too. :o)
>

use of public/private keys for sshd and then turning off password
based access rocks

if you have to use passwords for ssh then check out denyhosts

<http://denyhosts.sourceforge.net/>

works a treat

mike